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TNI THg CLAIMS : 

This listing of claims will replace all prior versions, and listings, of claijns in the 
application: 

1. (Original) In an infrastructure in which some of a plurality of entities provide 
cryptographically supported services, a method of registering a subscriber entity of a plurality 
of entities at a principal entity of a plurality of entities, the method comprising: 

the subscriber entity requesting service from the principal entity by sending a request 
message to a registrar entity of the pluraUty of entities; 

dxe registrar entity verifying the subscriber entity and forwarding the request for 
service to the principal entity; 

the principal entity storing the forwarded request and transmitting an 
acknowledgement message to the registrar entity, the acknowledgement stating acceptance 
and authentication/authorization infoimaiion that the subscriber entity requires for the 

requested service; and 

the regisn^ entity veriftang the authenticity of the received acknowledgement 
message, and, if correct, forwarding the acknowledgement message to the subscriber entity. 

2. (Onginal) A method as in claim 1 wherein the request message contains an 
indication of the type of service requested by the subscriber entity. 

3. (Currently amended) A method as in claim 2 wherein the request message 
contains one or more of the following: 

(a) a unique reference to the subscriber entity; 

(b) attributes about the subscriber entity; 

(c) authentication information to be used to authenticate use of the service; 

(d) transactional verification information; 

(e) ft representation roproGontationfl by the subscriber entity agreeing to what the 
entity subscriber accepts; 

(f) a preferred service rolationahips relationship ; and 

(g) a s nbsoriber's subscriber entity '_s authenticator. 
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4. (CwrenUy amended) A method as in claim 3 wherein die unique reference lo 
me subscriber entity is at least one of (a) the subscriber «Ase«be^ eifiijylS identity, (b) a 
pseudonym for one-time service, and (c) a pseudonym for continued use of the service 

5. (Cuiiently amended) A method as in claim 3 wherein *e a session identifier 
links ftiture responses to this particular request. 

6. (Currently amended) A method as in claim 3 wherein the atcributes about the 

subscriber entity include: 

(a) a 3clf-T opyooowtfttiQn !; "»prft«;eTitarion: and 

(b) a thinj-party T^resentarion roproaontations asserting attributes. 

7. (Currently amended) A method as in claim 6 wherein said repre^^t^tjon 
rppT-finnntfitinTir and amibute fttiributoa include at least some of: 

(a) an address addrooQ e a ; 

(b) employment information; 

(c) information from one or more other entities needed for service provisioning; and 

(d) an fliii ^nriyation auihorigaliona from ano^ o^ jam P^fties. 

8. (Ori^nal) A method as in claim I fiinher comprising: 
modifying tiie registration of the subscriber entity at the principal entity. 

9. (Original) A method as in claim I farther comprising: 

moving the registration for service from the principal entity to another entity of said pluraUty 
of entities. 

1 0. (CunenUy amended) A method as in claim 1 wherein the service includes: 
operating a cryptographically-supported transaction mvolving the subscriber entity, 

ttxe principal entity and possibly ftneormore additional entities. 

1 1 . (Original) A method as in claim I wherein the subscriber entity comprises a 
plurality of elements. 
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12. COriginal) A method as in claim 1 1 wherein the plurality of elemews are 
associated with an entity. 

13. (Currently amended) A method as in claim 1 wJiSEda «*efe said service is a 
subset of a totality of services. 

14. tCmrently amended) A method as in claim I wherein whefe service is a 
warranty service. 

1 3. tCurrently amended) A method as in claim 1 3 wherein another subset of the 
totaUty of services to the subscriber entity is provided by an entity different from fis£ 
principal entity. 

1 6. (Original) A method as in claim 1 5 wherein the subscriber entity can modify 
the subset of totality of services between entities. 

1 7. (Currently amended) A method as in claim 8 wherein wfeef© modification is 
supervised by one or more au^rities. 

1 8. (Currently amended) A method as in claim 9 wherein wbefs moving of 
services is supervised by one or more authorities. 

19. (Currently amended) A method as in claim I vy^gre"^ provision of 
service may involve an additional entity from *e said plurality of entities. 

20. (Currently amended) A method as in claim 19 wherein wbete provision of 
service is split between said principal entity and said additional entity. 

21 . (Original) A method as in claim I wherein provision of service by said 
principal entity on behalf of said subscriber entity is given by said operating infrasimcrore to 
an entity wiUiin said plurality of entities. 

22. (Original) A method as in claim I wherein said provision of service by said 
principal entity involves other entities within said plurality of entities. 
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23. (Original) A method as in claim 14 wherein said wairanty service involves 
correcmess of representation of informaiion- 

24. (Currently amended) A method as in cjaim 23 wherein said representation of 
information is at least one of: (a) identity information, (b) financial information; ^ (c) 
information derived from provision of service within said inflrastrucmre. 

25. (Currently amended) A method as in claim 14 wherein the sy«ei» 
iTYfraatnicmre includes a mechanism to initiaie claiJ»s against failed warranty. 

26. (Currently amended) A method as in claim 1 wherein s a i d servi ee provision of 
service iaveWe involves control of access. 

27. (Original) A method as in claim I wherein at least one of said pluraUty of 
entities is an enterprise. 

28. (Original) A method as in claim I wherein at least one of said plurality of 
entities is a financial instimte. 

29. (Original) A method as in claim 1 wherein said principal entity is a group of 
elementary entities. 

30. (Currently amended) A method as in claim I wherein said provision of service 
by principal entity is directed by said subscriber entity. 

3 1 . (Original) A method as in claim 8 wherein registration modification 
transactions involve managing capabilities. 

32. (Original) A method as in claim 8 wherein registration modification 
transactions involve crypiogr^bic Icey management. 

33. (Original) A method as in claim I further comprising: 
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pioviding. by the principal emity. ai leasi one of a set of various service iransactiom 
to the subscriber entity. 

34. (Original) A rneihoa as in claim 33 wherein said providing involves the 
certification of digital identities. 

35. (Original) A method as in claim 33 wherein at least one of said service 
transactions involves asswing an entity's state. 

36. (Original) A method as in claim 33 wherein at least one of said service 
transactions involves assuring financial information. 

37. (Original) A method as in claim 33 wherein ai least one of said service 
transactions involves assurance of identity and assurance of «viity's staie. 

38. (Currently amended) A method as in claim 1 wherein wfedF© some of said 
plurality of entities are supervised by one or more other entities in at least one transaction. 

39. (Cunentty amended) A method as in claim 1 [[.]] jvh^ein where service 
SMviees isvolves fevelve a fee fees based on a service as^^ 

40. (Currently amended) A method as in claim I [[,]] wherein added eesttol 
manaeemeni and nneormore additional entities assure integrity of transactions within the 

r infraatmcture. 


41. (Currently amended) A method as in claim 40 wherein*© integrity of the 
management function is enhanced by providing two or more independent reports. 

42. (Original) A method as in claim 40 wherein the management function controls 
actions of assurance oifering entities on a per transaction basis. 
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